CVE-2026-74420

Source
https://cve.org/CVERecord?id=CVE-2026-74420
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74420.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74420
Downstream
Published
2026-08-15T05:59:24.704Z
Modified
2026-08-16T03:48:35.246164094Z
Summary
drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges

VMAs marked with VMIO or VMPFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, getpages() relies on hmmrange_fault() to resolve struct pages for the target range.

Attempting to create an SVM range on such VMAs results in repeated getpages() failures and can lead to an infinite loop inside a driver’s page‑fault handler. Prevent this by rejecting ranges on VMIO or VM_PFNMAP VMAs and returning -EIO.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74420.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
99624bdff8670795b678eafa6509aaad3a5c0175
Fixed
353f26c74660bcbd8d82cd76622748e14a5a5db3
Fixed
63f443384979563f16f70420f4fa85bba31238ca
Fixed
b82a225e57a334335a21462b75ee2223bc6efe6d

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74420.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.15.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74420.json"